Legal
Privacy Policy
Effective date: 1 June 2026 · Last updated: 1 June 2026
This Privacy Policy explains how HealthWarriors(“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our platform at healthwarriors.in (the “Platform”). By using the Platform, you agree to the practices described in this Policy.
1. Information We Collect
1.1 Information You Provide
- Account registration: Mobile number (for OTP verification), full name, and user role (Nurse, Hospital, Lab, Recruiter)
- Professional profile (Nurses): Qualification, years of experience, specialisation, preferred location, expected salary, availability status, photograph, resume, and professional registration number
- Employer profile (Hospitals / Labs): Organisation name, type, address, contact details, licence information, and logo
- Job postings: Role details, salary range, location, shift preferences, and requirements
- Applications and messages: Job applications and in-platform communications between users
- Payment information: Subscription and payment processing is handled by Razorpay. We do not store card or bank account details on our servers
1.2 Information Collected Automatically
- Device type, operating system, and browser type
- IP address and approximate location (city/state level)
- Pages visited, features used, and time spent on the Platform
- Session identifiers stored in secure HTTP-only cookies
2. How We Use Your Information
We use the information we collect for the following purposes:
- Platform operation: To create and manage your account, verify your identity via OTP, and deliver the core features of the Platform
- Job matching: To compute match scores between nurse profiles and job postings so relevant opportunities are surfaced
- Communication: To enable in-platform messaging between professionals and employers, and to send you notifications about your account, applications, and job alerts
- Subscriptions and payments: To process and manage paid subscription plans and to send billing-related communications
- Safety and compliance: To detect fraud, enforce our Terms of Service, and comply with applicable Indian law
- Platform improvement: To understand how the Platform is used and to improve features, performance, and user experience (using aggregated, anonymised data)
We do not sell your personal information to any third party. Ever.
3. Information We Share
We share your information only in the limited circumstances described below:
- Between users on the Platform:When a nurse applies for a job, the applying nurse's profile (name, qualification, experience, contact details) is shared with the employer for that job. When an employer posts a job, basic employer details are shown to professionals browsing the Platform. You consent to this sharing by using the Platform.
- Service providers: We engage trusted third-party service providers (including cloud hosting, payment processing via Razorpay, and SMS OTP delivery) strictly to operate the Platform. These providers are contractually bound to use your data only for the services they provide to us.
- Legal obligations: We may disclose information if required by a court order, government authority, or applicable Indian law, including the Information Technology Act 2000 and rules made thereunder.
- Business transfer: In the event of a merger, acquisition, or sale of all or part of our business, user data may be transferred as part of that transaction. We will notify you of any such change.
We are not responsible for the privacy practices of hospitals, clinics, labs, or other employers who access your profile through the Platform. Once your information is shared with an employer as described above, that information is subject to the employer's own privacy practices.
4. Data Security
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:
- Encryption of data in transit (TLS/HTTPS)
- Hashed storage of OTP codes (never stored in plain text)
- HTTP-only session cookies to prevent client-side access
- Rate limiting on authentication and sensitive API endpoints
- Access controls limiting employee access to user data on a need-to-know basis
No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security and will not be liable for any unauthorised access that occurs despite our reasonable precautions. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.
5. Data Retention
We retain your personal information for as long as your account is active, or as long as necessary to provide the services. Specifically:
- Account and profile data: retained while your account is active and for up to 3 years after account closure for compliance purposes
- OTP records: deleted automatically within 30 days
- Messages: retained for the lifetime of both users' accounts
- Payment and transaction records: retained for 7 years as required by Indian tax and accounting laws
You may request deletion of your account and personal data at any time by contacting us. Deletion requests will be processed within 30 days, subject to legal retention requirements.
6. Your Rights
Under the Digital Personal Data Protection Act 2023 (India) and applicable law, you have the following rights:
- Right to access: Request a copy of the personal data we hold about you
- Right to correction: Request correction of inaccurate or incomplete personal data
- Right to erasure: Request deletion of your personal data, subject to legal retention requirements
- Right to withdraw consent: Withdraw consent for data processing where consent is the legal basis; withdrawal does not affect prior processing
- Right to grievance redressal: Lodge a complaint regarding data processing with us or with the Data Protection Board of India
To exercise any of these rights, submit a privacy request, contact us at +91 93909 99614, or use the in-app settings. We will respond within 30 days.
7. Cookies and Tracking
We use cookies and similar technologies for the following purposes:
- Session cookies (essential): To keep you logged in during your session. These are HTTP-only, cannot be read by scripts, and are deleted when you log out
- Analytics (anonymised): To understand how the Platform is used. We use anonymised, aggregated data only and do not track individual behaviour for advertising
We do not use tracking cookies for advertising, remarketing, or cross-site tracking. We do not share cookie data with ad networks.
8. Third-Party Services
The Platform integrates the following third-party services. Each has its own privacy policy:
- Razorpay: Payment processing. Razorpay processes payments under its own Privacy Policy and PCI DSS compliance
- SMS providers (e.g. 2factor.in / MSG91): Used exclusively to deliver one-time passwords. Your mobile number is shared with the SMS provider solely for OTP delivery
- Cloud infrastructure: Our servers are hosted in India. Data does not leave Indian territory without your explicit consent
9. Children's Privacy
The Platform is intended for use by adults aged 18 and above. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has provided personal information without parental consent, we will delete such information promptly. If you believe we have inadvertently collected information from a minor, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a revised effective date and, where appropriate, by sending a notification through the Platform. Your continued use of the Platform after the updated policy is posted constitutes your acceptance of the changes. We encourage you to review this Policy periodically.
11. Contact for Privacy Matters
For any privacy-related queries, requests, or complaints, please contact us:
HealthWarriors
Hyderabad, Telangana, India
Phone / WhatsApp: +91 93909 99614
We aim to resolve privacy concerns within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India once operational under the Digital Personal Data Protection Act 2023.